Red Hat Security Advisory

RHSA-2024:9243

postfix security update

Released 2024-11-12 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) postfix-2:3.5.25-1.el9, postfix-cdb-2:3.5.25-1.el9, postfix-ldap-2:3.5.25-1.el9 +6

Fixes 1 record

TI-2023-28393 CVE-2023-51764 · GHSA-j5jm-hg4x-w8rx

Postfix through 3.8.5 allows SMTP smuggling unless configured with…

LOW 35

Postfix through 3.8.5 allows SMTP smuggling unless configured with smtpd_data_restrictions=reject_unauth_pipelining and smtpd_discard_ehlo_keywords=chunking (or certain other options that exist in recent versions).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02635 Published 2023-12-24 Partial fix CWE-345